usdtcheckbsc[.]in

usdtcheckbsc.in was registered through Dynadot LLC on 21 February 2026. The domain resolves to the IPv4 address 172.105.59.208, which belongs to AS63949 Akamai Connected Cloud and is geolocated in India. DNS resolution uses the authoritative name servers ns1.dyna-ns.net and ns2.dyna-ns.net. The site presented an SSL certificate issued by Let’s Encrypt, serial number E7, indicating that TLS was correctly configured at the time of observation. The only visible page title retrieved was "BNB VERIFY", and the listed scam type is "Crypto Scam", targeting the Binance brand.

The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed. Gridinsoft assigned a trust score of 0 out of 100, reflecting a maximal risk rating. VirusTotal analysis shows that 2 of 93 scanning engines flagged the domain, providing additional confirmation of malicious intent. The current operational status is offline, suggesting that the hosting has been taken down or the site is no longer serving content.

Analysis confirms that the infrastructure, branding cues, and vendor detections align with a classic brand‑impersonation campaign aimed at Binance users. However, the limited number of vendor detections and the single blocklist entry leave uncertainty regarding the full scope of the campaign, such as the presence of additional phishing pages or credential‑harvesting endpoints. Defenders should continue to block the domain at network perimeter and DNS filtering layers, monitor for any re‑appearance of the hostname or associated IP address, and update threat intelligence feeds with the observed indicators. Ongoing observation of the IP range 172.105.59.208 and the Dynadot name server pair is recommended to detect potential redeployment of the impersonation infrastructure.